CVE-2016-0713: XSS

Published Aug 31, 2017

Updated

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.

Affected Software

88 affected components

cloudfoundry Cf-release=141

cloudfoundry Cf-release=142

cloudfoundry Cf-release=143

cloudfoundry Cf-release=144

cloudfoundry Cf-release=145

cloudfoundry Cf-release=146

cloudfoundry Cf-release=147

cloudfoundry Cf-release=148

cloudfoundry Cf-release=149

cloudfoundry Cf-release=150

cloudfoundry Cf-release=151

cloudfoundry Cf-release=152

cloudfoundry Cf-release=153

cloudfoundry Cf-release=154

cloudfoundry Cf-release=155

cloudfoundry Cf-release=156

cloudfoundry Cf-release=157

cloudfoundry Cf-release=158

cloudfoundry Cf-release=159

cloudfoundry Cf-release=160

cloudfoundry Cf-release=161

cloudfoundry Cf-release=162

cloudfoundry Cf-release=163

cloudfoundry Cf-release=164

cloudfoundry Cf-release=165

cloudfoundry Cf-release=166

cloudfoundry Cf-release=167

cloudfoundry Cf-release=168

cloudfoundry Cf-release=169

cloudfoundry Cf-release=170

cloudfoundry Cf-release=171

cloudfoundry Cf-release=172

cloudfoundry Cf-release=173

cloudfoundry Cf-release=174

cloudfoundry Cf-release=175

cloudfoundry Cf-release=176

cloudfoundry Cf-release=177

cloudfoundry Cf-release=178

cloudfoundry Cf-release=179

cloudfoundry Cf-release=180

cloudfoundry Cf-release=181

cloudfoundry Cf-release=182

cloudfoundry Cf-release=183

cloudfoundry Cf-release=184

cloudfoundry Cf-release=185

cloudfoundry Cf-release=186

cloudfoundry Cf-release=187

cloudfoundry Cf-release=188

cloudfoundry Cf-release=189

cloudfoundry Cf-release=190

cloudfoundry Cf-release=191

cloudfoundry Cf-release=192

cloudfoundry Cf-release=193

cloudfoundry Cf-release=194

cloudfoundry Cf-release=195

cloudfoundry Cf-release=196

cloudfoundry Cf-release=197

cloudfoundry Cf-release=198

cloudfoundry Cf-release=199

cloudfoundry Cf-release=200

cloudfoundry Cf-release=201

cloudfoundry Cf-release=202

cloudfoundry Cf-release=203

cloudfoundry Cf-release=204

cloudfoundry Cf-release=205

cloudfoundry Cf-release=206

cloudfoundry Cf-release=207

cloudfoundry Cf-release=208

cloudfoundry Cf-release=209

cloudfoundry Cf-release=210

cloudfoundry Cf-release=211

cloudfoundry Cf-release=212

cloudfoundry Cf-release=213

cloudfoundry Cf-release=214

cloudfoundry Cf-release=215

cloudfoundry Cf-release=216

cloudfoundry Cf-release=217

cloudfoundry Cf-release=218

cloudfoundry Cf-release=219

cloudfoundry Cf-release=220

cloudfoundry Cf-release=221

cloudfoundry Cf-release=222

cloudfoundry Cf-release=223

cloudfoundry Cf-release=224

cloudfoundry Cf-release=225

cloudfoundry Cf-release=226

cloudfoundry Cf-release=227

cloudfoundry Cf-release=228

Event History

Aug 31, 2017

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0713?

CVE-2016-0713 has a medium severity level due to its potential for enabling man-in-the-middle attacks and leading to cross-site scripting vulnerabilities.

How do I fix CVE-2016-0713?

To fix CVE-2016-0713, users should upgrade to a patched version of the Cloud Foundry cf-release, specifically version 229 or later.

What software versions are affected by CVE-2016-0713?

CVE-2016-0713 affects Cloud Foundry cf-release versions from 141 through 228.

What type of attack does CVE-2016-0713 allow?

CVE-2016-0713 allows man-in-the-middle attackers to execute cross-site scripting (XSS) attacks through modified requests.

How can I identify if my Cloud Foundry installation is vulnerable to CVE-2016-0713?

You can identify if your installation is vulnerable to CVE-2016-0713 by checking the current version of cf-release and seeing if it falls between versions 141 and 228.